Privacy Notice
Last updated: May 13, 2026
This Privacy Notice explains how Goaldy ("we," "us," or "our"), operated by Fundlify UG (haftungsbeschränkt), collects, uses, discloses, and protects your personal information when you use our platform at goaldy.ai(the "Service"). By accessing or using the Service, you agree to the terms of this Privacy Notice.
1. Information We Collect
1.1 Account Information
When you create an account, we collect:
- Name and display name
- Email address
- Profile photo (if provided or obtained via Google Sign-In)
- Chosen handle (@username)
- Password (encrypted; only for email/password accounts)
1.2 Content & Project Data
We collect and store content you create on the platform, including:
- Project names, descriptions, and cover images
- Product briefs, sections, and published pages
- Uploaded images and media files
- AI-generated content (briefs, sections, outreach messages)
- Scouting results and lead data
1.3 Usage Data
We automatically collect:
- Device information (browser type, OS)
- IP address and approximate geolocation
- Pages viewed, features used, and interaction patterns
- AI usage metrics (generation counts, model usage)
- Timestamps and session duration
1.4 Social Engagement Data
When visitors interact with published pages:
- Anonymous engagement data (likes, views) via browser fingerprinting
- Authenticated engagement data (comments, follows) linked to user accounts
- Comment content and associated user profiles
1.5 Third-Party Authentication
If you sign in using Google, we receive your name, email, and profile picture from Google. We do not receive or store your Google password.
2. How We Use Your Information
We use your information to:
- Provide the Service: Create and manage your account, projects, and products
- AI Content Generation: Process your inputs to generate briefs, sections, and outreach content using third-party AI models (Google Gemini, OpenAI)
- Scouting: Scan publicly available web content to find relevant discussions about your product space
- Analytics: Track engagement metrics on your published pages
- Communication: Send service-related notifications (e.g., password reset emails)
- Security: Detect and prevent fraud, abuse, and policy violations
- Improvement: Analyze usage patterns to improve our features and user experience
3. AI-Generated Content
Goaldy uses artificial intelligence to generate content on your behalf. When you use our AI features (brief generation, section creation, visual generation, scouting, outreach), your inputs are processed by third-party AI providers including Google (Gemini) and OpenAI.
- Your inputs may be sent to these providers for processing. We do not control how these providers handle data beyond our agreements with them.
- AI-generated outputs are provided "as-is." You are solely responsible for reviewing, editing, and approving all AI-generated content before publishing or distributing it.
- We do not use your content to train AI models. However, third-party AI providers may have their own data usage policies, which we encourage you to review.
4. Data Storage & Security
Your data is stored on:
- Google Cloud Platform (GCP): Firestore databases, Cloud Storage for media files
- Firebase Authentication: Account credentials and session management
We implement industry-standard security measures including encryption in transit (TLS/SSL), encrypted storage, access controls, and regular security audits. However, no method of electronic storage is 100% secure, and we cannot guarantee absolute security.
5. Data Sharing & Disclosure
We do not sell your personal information. We may share data with:
- Service Providers: Google Cloud, Firebase, and AI providers (Google Gemini, OpenAI) to operate the Service
- Public Content: When you publish a page, the content you choose to publish becomes publicly accessible
- Legal Requirements: When required by law, legal process, or to protect our rights and safety
- Business Transfers: In connection with a merger, acquisition, or sale of assets
6. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access your personal data
- Correct inaccurate data
- Delete your account and associated data
- Export your data in a portable format
- Object to certain processing activities
- Withdraw consent where processing is based on consent
To exercise any of these rights, contact us at hello@goaldy.ai.
7. Data Retention
We retain your data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law or for legitimate business purposes (e.g., fraud prevention, legal disputes).
8. Cookies & Tracking
We use:
- Essential cookies: For authentication and session management
- Browser fingerprinting: For anonymous engagement tracking on published pages (likes/views deduplication)
- Local storage: For UI preferences and dismissed notifications
We do not use third-party advertising cookies.
9. Children's Privacy
Goaldy is not intended for users under 16 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, contact us at hello@goaldy.ai and we will delete it promptly.
10. International Data Transfers
Your data may be transferred to and processed in countries other than your own, including the United States (where Google Cloud and AI providers operate). As a German entity, we comply with the General Data Protection Regulation (GDPR) and ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs), for all international data transfers.
11. Changes to This Notice
We may update this Privacy Notice from time to time. We will notify you of material changes by posting the updated notice on this page and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated notice.
12. Contact Us
If you have any questions about this Privacy Notice, contact us at:
- Email: hello@goaldy.ai
- Entity: Fundlify UG (haftungsbeschränkt), Berlin, Germany